CURLSOAPTransport failure for SP 2.5.2 on CentOS 5.x
Scott Koranda
skoranda at gmail.com
Wed Nov 6 03:27:59 EST 2013
On Wed, Nov 6, 2013 at 2:16 AM, Peter Schober
<peter.schober at univie.ac.at> wrote:
> * Scott Koranda <skoranda at gmail.com> [2013-11-06 06:43]:
>> It is true that the certificate being used by the attribute authority
>> has a subject name that is the host machine's canonical name
>> (myhost.edu) but that is not the <VirtualHost> servicing the SOAP
>> endpoint (myauthority.org).
>
> Why not change the metadata so that the FQDN used for the AA matches
> the TLS/SSL cert's subject (or vice versa)? Or replace the cert with
> one that lists all host names in the X.509v3 SubjectAltName extension?
> -peter
I have replaced the certificate. Since I control the metadata feed it was
the quickest solution.
I am curious, however, about the difference in behavior between CentOS 5.x
and 6.x? My guess is that it is related to the versions of OpenSSL being used
in each case.
Thanks,
Scott
More information about the users
mailing list